A Flaw In Slack, The Group Messaging App That's Going Viral In Silicon Valley, Exposes The Names Of Chat Rooms To Anybody

Advertisement

Blogger Tanay Sai on Wednesday discovered a major issue with Slack, the "viral" team communication platform that's taken Silicon Valley by storm, raising $60 million in funding in the process.

When using the Slack client for Mac, Sai discovered that you can visit Slack.com, enter a fake email address with any real company domain (like Apple.com, Google.com, etc.), and you can see all of the internal Slack teams associated with that company.

You can't enter the Slack rooms, but you can see the names of the rooms. As Sam Biddle at Valleywag points out:

Advertisement

Sure, you can't actually join the teams, or see what channels exist within them, or read a single letter that's been exchanged. But I now know there's a Slack team at Google called "Tribe Wearables"-does that mean they acquired this company? Even if this isn't sensitive information, it's still information-and that's not what people are paying Slack to do.

In some cases, performing this maneuver lets you see what these companies are working on. Check it out:

Here's Apple:

Advertisement

Screen Shot 2014 10 08 at 11.13.41 AM

Dave Smith/Business Insider

And Microsoft:

Screen Shot 2014 10 08 at 11.36.23 AM

Dave Smith/Business Insider

Advertisement

And The New York Times:

Screen Shot 2014 10 08 at 11.13.23 AM

Dave Smith/Business Insider

And The Wall Street Journal:

Advertisement

Screen Shot 2014 10 08 at 11.20.53 AM

Dave Smith/Business Insider

And Twitter:

Screen Shot 2014 10 08 at 11.19.16 AM

Dave Smith/Business Insider

And Amazon:

Advertisement

Screen Shot 2014 10 08 at 11.19.42 AM

Dave Smith/Business Insider

And Uber:

Screen Shot 2014 10 08 at 11.14.10 AM

Dave Smith/Business Insider

Advertisement

And Lyft:

Screen Shot 2014 10 08 at 11.14.21 AM

Dave Smith/Business Insider

And last but certainly not least, Slack:

Advertisement

Screen Shot 2014 10 08 at 11.19.56 AM

Dave Smith/Business Insider

You can try this with basically any company you can think of - Slack is particularly hot among Silicon Valley startups.

We've reached out to Slack for comment, and the company said it would get back to us shortly.

Advertisement